last executing test programs:

3.568294817s ago: executing program 0 (id=552):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x8, 0x7, 0x6, 0x4}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000060a010400000000000000000a0000060900010073797a31000000003c000480200001800e000100636f6e6e6c696d69740000000c0002800800014000000005180001800d00010073796e70726f787900000000040002800900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)=<r1=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000380)={{r0}, r1, 0x6, @unused=[0x7, 0x9, 0x800, 0x9], @subvolid})

3.490032922s ago: executing program 0 (id=553):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) (async)
sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async)
pipe(&(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
accept4$nfc_llcp(r3, &(0x7f0000000580), &(0x7f0000000480)=0x60, 0x80000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000080)
write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async, rerun: 32)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0)
close(r7) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64)
socket$inet(0x2, 0x2, 0x0) (rerun: 64)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r9, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
splice(r2, 0x0, r5, 0x0, 0x1100000000f336, 0x0) (async, rerun: 64)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x24008840) (async)
r12 = socket(0x18, 0x2, 0xfff) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r12, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r13, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40041)

3.386840043s ago: executing program 0 (id=556):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000101, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, 0x0, 0x8000)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'wlan0\x00', <r3=>0x0})
syz_80211_inject_frame(&(0x7f0000001900)=@device_b, &(0x7f0000001940)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7f01}, @broadcast, @device_b, @initial, {0x9, 0xffc}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x6, @default, 0x10, @void, @void, @void, @val={0x4, 0x6, {0x20, 0x0, 0x0, 0x8}}, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x0, 0x0, {0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x0, 0x4}}, @val={0x72, 0x6}, @void, [{0xdd, 0x6, "7fbd4156be57"}]}, 0x5c)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x24004004)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000001e00)=0x8, 0x12)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000001e40)={0x1f, @none, 0x7}, 0xa)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000001e80)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000002180)=[{0x0}, {&(0x7f00000020c0)="d77bfd58fe775d2a4d3a56966e6edc7bedef0604d6ba2e4d5a289372ce", 0x1d}], 0x2}, 0x81)
syz_emit_ethernet(0x29f, &(0x7f0000000c00)={@empty, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x2, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x4}, {0x8}], @ipv6=@dccp_packet={0xc, 0x6, "6bcd36", 0x259, 0x21, 0x80, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x3c, 0x6, 0x4, 0x3, 0x8, 0x8, 0x80, [@dev={0xfe, 0x80, '\x00', 0x30}, @empty, @mcast1]}, @fragment={0x21, 0x0, 0x4, 0x0, 0x0, 0x1, 0x65}, @hopopts={0x1d, 0x30, '\x00', [@jumbo={0xc2, 0x4, 0x80000001}, @generic={0x2, 0x3e, "5fe45bd2e76595951eb44dfa87a349bf017ebdfbdcbf67c0e5eff97a63832c8c82359bbc6542ab3bfe2a9b0af6c72ae45117b1527d56473dccc9f1d723b7"}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0xd13}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x40, 0x132, "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"}]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x3, "bb3947", 0x8, "5ccb27"}, "62f8d6f806e3129d57faf4fb3d6ea251d6eea46ff151f4bf0bbd80f10ae5c39c47b9c8acbb4530a5e3bb6640ed9db5b04e82f8dde4afd21861bef4b0736cfe1f40d98fdeafe22dd84dd117ef9a42298510b8f13cd067fc0bf1b589e91465276e92173d3c5d6f9eb31f0694cb42b31fa1574aaec350426f47e7"}}}}}}}, &(0x7f0000002380)={0x0, 0x1, [0x67b, 0x428, 0xf75, 0xaea]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x8)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002580), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r1)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20004094)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002740)={0x2, &(0x7f0000002700)=[{0x2, 0x7, 0x9, 0x4}, {0x0, 0xb3, 0x5, 0xd}]}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000027c0)={'sit0\x00', 0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
socket(0x1, 0x3, 0x2f9b)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r8=>0x0})
r9 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x388, 0x0, 0xffffffff, 0x0, 0x258, 0x610, 0x610, 0xffffffff, 0x610, 0x610, 0x5, 0x0, {[{{@ipv6={@private2, @loopback, [0xffffff00, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 'batadv0\x00', 'macvlan1\x00', {}, {0xff}, 0x0, 0x8, 0x2, 0x8}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@rand_addr=0x64010100, @ipv4=@multicast1, @icmp_id=0x67, @icmp_id=0x65}}}, {{@ipv6={@empty, @loopback, [0xffffffff, 0xff, 0x0, 0xffffff00], [0x100000001, 0xffffff00, 0xffffff00, 0xff], 'lo\x00', 'rose0\x00', {0x33faf3d1ebf79628}, {}, 0x21, 0x9, 0xe, 0x1}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@local, @ipv6=@mcast1, @port=0x4e24, @icmp_id=0x67}}}, {{@ipv6={@mcast2, @loopback, [0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0xff, 0xffffff00], 'veth0_to_bridge\x00', 'ipvlan1\x00', {}, {}, 0x32, 0x6, 0x9, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@empty, @ipv6=@local, @port=0x4e21, @gre_key=0x40}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x17, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0xf635, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x34}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}}, 0x0)

2.809027699s ago: executing program 0 (id=566):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="00007207081001"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc0100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4ed99125cc795f7fca7adb7caa7c3b1ef3d93452a09004b43370e", 0xd8}], 0x1}, 0xc0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
read(r3, &(0x7f0000001240)=""/4096, 0x1000)
socket$netlink(0x10, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000001c0)={0x2, 'ipvlan0\x00', {0x9}, 0x7f})
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x8001, @private2, 0xc75}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90)

1.940105142s ago: executing program 0 (id=580):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0xa, 0x8001}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="b975b6851679d5cf4843e73896cb513f10c92a092a9d08b42dd8578d590bbe64992ee587810f9105c77ded2a8074", 0x2e}, {&(0x7f0000000440)="618533eb3cdf89c06227e9c8c33fef0a16ca487bd52f49139c383c5ef06f7f8b829b0d8070c56e98409e3731596c05e88dcd630fca5f844e660dac961e235edf1c1a94ca0962edaea0c8f11907654de536455722f6291a4f1c50599945dfb670096a46eb92379c1eb441aee6776a1500d88567f1cedd021b25429138a5800dd25e82f55673e0dbff763369b4d8c26733490d8fa08f6f89ceee692f08535b30254ffc6c65951bcbfa3f6bb4eb20", 0xad}], 0x2, 0x0)

1.709260157s ago: executing program 0 (id=584):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in=@multicast2}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r0, r2, 0x8f5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

439.076879ms ago: executing program 1 (id=598):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpc_buf_alloc\x00', r0, 0x0, 0xffffffff}, 0x18)

358.083521ms ago: executing program 1 (id=599):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800f7000000000024000000240000000200000000000000000000040000000300000000000000000000000000000000000000b77f376acb20"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

299.242342ms ago: executing program 1 (id=601):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000061104c000000000005000000000000009500000c000000000d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
socket$netlink(0x10, 0x3, 0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0)

298.463721ms ago: executing program 2 (id=602):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r2], 0x60}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40fe89dad90bc79da3d842a155acc5ffffffdd2e", @ANYRES32=r4, @ANYBLOB="408f010008200200200012800e0001006970366772657461700000000c0002800600110000000000"], 0x40}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8097, 0x2021}, [@IFLA_LINKINFO={0x1a, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYBLOB="0000000002000000b70500d690cd56bc8a7f000800000085002883ecb4c65e3c0d09ce4d16397c8545c75d130bd2fdb4ed7708f40258240b00bb01703d8a28cdae34e11692e171cac62aa212d73abc69dffba1c64856801b8d57d959863d3091e178fe514f3be2d17a98ee0fe5c9e3411f5359f9c393efeb468b861dd3d1a57a0344a76e039ca4ca7e05189ff94c84ab900d0d76fc48621f0560ebe68570c23b7b9263b6af2bce0c5090e1f81597ec9a31801220324f9b5fafa660905918b245c52dba4c7676fd5556d537193e3f1a67a08e35f04b7588519cbd4cc6"], &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, r6}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r2], 0x60}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40fe89dad90bc79da3d842a155acc5ffffffdd2e", @ANYRES32=r4, @ANYBLOB="408f010008200200200012800e0001006970366772657461700000000c0002800600110000000000"], 0x40}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8097, 0x2021}, [@IFLA_LINKINFO={0x1a, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYBLOB="0000000002000000b70500d690cd56bc8a7f000800000085002883ecb4c65e3c0d09ce4d16397c8545c75d130bd2fdb4ed7708f40258240b00bb01703d8a28cdae34e11692e171cac62aa212d73abc69dffba1c64856801b8d57d959863d3091e178fe514f3be2d17a98ee0fe5c9e3411f5359f9c393efeb468b861dd3d1a57a0344a76e039ca4ca7e05189ff94c84ab900d0d76fc48621f0560ebe68570c23b7b9263b6af2bce0c5090e1f81597ec9a31801220324f9b5fafa660905918b245c52dba4c7676fd5556d537193e3f1a67a08e35f04b7588519cbd4cc6"], &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, r6}, 0x94) (async)

227.392293ms ago: executing program 1 (id=603):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94)
r0 = socket$inet(0x2, 0xa, 0x9)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', <r1=>0x0, 0x6, 0x8, 0xd6, 0xffff, {{0x18, 0x4, 0x0, 0x1b, 0x60, 0x64, 0x0, 0x3, 0x2f, 0x0, @local, @private=0xa010102, {[@lsrr={0x83, 0x7, 0x31, [@loopback]}, @timestamp_addr={0x44, 0x24, 0x7d, 0x1, 0x2, [{@rand_addr=0x64010101, 0x2}, {@empty, 0x7}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @ssrr={0x89, 0x7, 0x48, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0xfc, 0x0, 0x9, [0x10000]}, @generic={0xc6, 0x10, "4756a555189dfde39b665c5c0e12"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', r1, 0x700, 0x10, 0x9, 0x9, {{0xd, 0x4, 0x3, 0x6, 0x34, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @empty, {[@rr={0x7, 0x1f, 0xcd, [@multicast1, @empty, @multicast2, @broadcast, @local, @local, @multicast1]}, @end]}}}}})

226.829216ms ago: executing program 2 (id=604):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x5c}}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002"], 0x48)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0xffffffff, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48)

167.733121ms ago: executing program 1 (id=605):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18)
write(r0, &(0x7f0000000080)="d2c3ea649deaad33defb9fc9c665b8e9dc646f68e70847ec260cacdac81936faa248b48bf056ad96235d49079f96c705fb281782bbeb178e28952a9cd5ee62187fb7075d90f7b4a0a21fedad9f9780a6d503243a9cfd8583fde4d21992bda52fa62062af5b84a4795cf626c415deef5d80bcd7bfea5b119edb42b511746347f7dc1c4ad4384061bfbd543537696fc94a6bb500ea3da761f69f3db46bed19415316ae34a1600842318441a7e229246ecbb18ed30285840c1c4e82dda200b8", 0xbe)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000140), 0x4)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x4, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "e0b3599f6a4e1511"}, 0x10}, 0x1, 0x0, 0x0, 0x20008040}, 0x1000)
sendmmsg(r2, &(0x7f0000001240)=[{{&(0x7f0000000280)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="02280c55e26f7a86c0c4bb423afe2df6cc5acf5ddf260ac9b5595a61c26eaf181dc5e644edb8d05218870777fb011c", 0x2f}], 0x1, &(0x7f0000000380)=[{0xe0, 0x112, 0x7, "381d35e704d512ddcb652606610c02259b4196bd18e47b2636b57ef58e4ef446c8112e73a4d097a34dc83abc15c1d3fa8c918a23d774d64887968cbecbbc83690c00527daa3e9126d9124f33baf4a5b902812da9a24a0fe81c8d79e40aa1201245b55a1b9ac92a4f09866d9dc042649f66dbdfdc5d6ace6ecb2bb048bec1ad3ffe52252b9a27e02104686f8adaab492cf7beb4f45876317ec0ecbf43e99220e17aac05bda2fdcaa69d8da2ad25b00dbc18b10e2d78b2943a0e38d3e4afcb9c060d818d7158a58e907953"}, {0xe0, 0x102, 0x7, "223232ebebae06eb3fc7eb496566b447d77719a220ca8aa7b4628c385c6238757ed6aec3a95d21b85a5f732e84a8dbe43fbf3ee011c191978159ad5d288224d47dccda0d06e2e8e2f2799a2abbc5dd6bab7bfdfbdd3d130eec43ef9665b6bfcd0b25776da67103d6ba9a45d0df5eaa1de17ca47c69e946e7426f36e06032c4685c999b12e2b1d23a8fcc9381fbb792a10dea42ec056762b2246c61de667bedc48b631495050a70ab45223803dd1a46ccf69ebde51c00cc115101f23281a6344f5008f292b0d86af40fe7c8"}, {0xa8, 0x0, 0x67, "b57101940a2000b3b23beee707e335123362828405ea827e2825e620f26b625a6fa3665fd465507777a3490e538b63b5c775966e8cd60cc1a6a7f9862c98ac2764e8f5df86eb942a18bf53b2258c2a1ffd099aea10f979fcd0498fda9fae5d57f3df04213288d3c98583bf7faf86b1049bcf59fdcaac8afeefb227fd8a21bc7c8069a8a7aebcd529e8bcaac67bd8dd21e807c86847"}, {0x78, 0x115, 0x1, "2576c31c5dc11240d1fb8434601f46b1831114f2fe7d3a6ffd9519c93d6e77677809b8334691f12ec29175ab86891078a2835cf00019b22aef94ef91952206615e3fc6866c181dc495683e1d41cce7447ba9bf98cdd56aff32d324de8de22fcca5000c25"}, {0x28, 0x6, 0x438, "0f9a7ba3b51c66b50ecdd5b81157ecbb80d123c5e8a5"}, {0xc8, 0x111, 0xfff, "61270c1464a29da23e71ef7590cb24514f42b8b8ceca759bff6fb8ab5899e6a7d188ff68654030d662517ccb2ab7c2aa2f4af8cc112b0bfdc1426fd9bd962bd78ecfbd38955456f7db650d40ff042b3def4603fdd063babad45a30750c6b836ca86f92f7213cdd309321df1df8a7ac90bc2bf58000133d8a4db341b613c2472f1e7cd1ef96e9ace0c3f39eff587214a9954cabda62f1226a9795177c7d4a60ecaaade1bcacf49ffd20268384eeb5b5924933efb018e0af"}], 0x3d0}}, {{&(0x7f0000000780)=@ieee802154={0x24, @short={0x2, 0xfffe, 0xaaa0}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)="03b5cb32f63c80", 0x7}], 0x1, &(0x7f0000000880)=[{0x98, 0x10d, 0x0, "ad7d8ced41a9705b78c1bfe7049383e2a2d25838cca75cf62b2b1746fdec836ca32afb210dd47d375a1c09631a3e950ad6ecf34763822668361961360a5167a42b2a48814641410e0be83cdba9001c177c1fbd6a34b1de5e1a452f34357a4b3a50f11eb4add2342c39923662350db00df89f062ff071f5c779c2ac7c1d10bf770b"}, {0x60, 0x113, 0x4, "2f5b262239fb31e3b9ae0a3df6b1467bcc246f7cd15ccd65ed629e0d06a14b505004a5b91c6c6c5f727a5004f3416ea660f936d951a3496821b7d4f9feb409935869b6e595b149c49cff61a6"}, {0xc0, 0x113, 0x4, "8cf5ed2071b523967e744233f2b9f7a774e63ee096cc6242b48f7f4172b3604cbf79efef906d1c36ab812de2abf92df6580315feb94bf3b869c2d89a2f8318d133687b3f2e069cbdb1982f63c281ebaac16bc709524f26f6f3eadece1a70692eb579d576302727755b0216d7d56b43232e2a04ec3a5850a8868bf1f80fb52be552d7cfc1216c5e303e0a17da87d8a93fd3410d14e46040e49bba437699b04db03610f6a5803d1a18c9056534ecda35"}, {0xa8, 0x10a, 0xffffff7f, "c067520f5e826085d9c2ffa0e0917399369a88cf1e10d5c61f3539de2f1b0d899af90f1348d16db27a54303131b4aa5dc99a930c78a39896c3407c6a5c7825508af3c3c6456ba4baf809536779a9f010d8b5f3b8fd4036a33433fc53b4fb4632c9dc66d86b68853e3809e10cd8013b59a464d5cbe455916b6ddace08e05863ea8f9f992b177f879aed6f0086019cb288b20f327accea740b"}, {0xf8, 0x117, 0x5, "c271c95c51115a8011b7f8faee94994d67a5af2ea2ca89ae9f62104d7e4d735618c1af1c6bae5c95d112676e90857bf157fd3e8ba4771e17988a478408045df37cd33bf54ee2921cbb5deefed5810ba4873aa37d7478cbe973337aff10b69c9006605a8d693bee5a816b5501a94cb4d8e472cdc8b7116437dc44cf15c6eee470ea79eed2bea7fb4c6ecc1592501b39a7f2af1977c2dea841cef3deadd2ba1d40a6474d7a9675333493f4b68cd44c73c4eff4aafe1aaef7eeba9ae345ce5f8daa12c11deaa2d5b13bd448a405ffebebe648d337dee2d5422c4a4fb338fa7233f5071f33060c"}], 0x358}}, {{&(0x7f0000000c00)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000c80)="bf6fba0be6c11097e72780053cd2588d3657073de7ddbdc3c546773c6147f99a271e9e1d3337a5e44ae43e302a47a14d71c5c51a25f94f4d3ad44008bf0893c38b65b9cad27dbad44a2277e8ca86499d3d3f03fea131b813ae47cdccf0f274d33db378f4a5a0f25ecf3690d7e521e0b3348a5f79a4943f0208f647f9b901dfbe36499c89d87ec3671a4fe7ef4dc68db0bebbfce7a3083b3109865909eacc875828c00f1c431bc25a97f843e2be955253b26a4727e2ebb64db9f5022494b4c5", 0xbf}, {&(0x7f0000000d40)="0a84f371f78e9b2b56df04f9157930d1f3b1c20aeb1a0463b18e9ae5fbf991a5a5915c29725d7c045d96c30cc7017fc2cb9dd0a5e0d5eb50c1894d0d94ec954f946e76f2942ca62771a24d093198bcffa65d3f19be634be26db3cf183930f89edc4675f0beca9bc682d1e0c51dc57e7caf0a8a0d05adc4", 0x77}, {&(0x7f0000000dc0)="bfc9e0cc64f04d600794f9d64fd787c9bbcf3a0e8f76dac5b7d3e56d121c6c8f49b048ba669a901459", 0x29}, {&(0x7f0000000e00)="0ca83561653d591a826b56427d533f556f1cb5de4a3c3aa26350f50dd63965516a7786cc75ab59ddfcc2ee13a8f0164dae9f57ec4d414261ebb30ade79bfc3991f085cdb158e53c1fba63588e82c8ff6d49708fa7f4e9bb2ae3fd483153c6d22a2ba9f4fd96d9937a0152f1be82a4d", 0x6f}, {&(0x7f0000000e80)="f245c375e48f6703909bac0e79b73096b3cdc842d7aa13086784399ef7653b29d618b304b30e4ef95941d00539d58c77240dfc11fc88969469436565ad2e10ecf5d030f71bf2b6a6a17b0f7bee060750e2589eb5610c68d681b188a23b0e7dd3c0f405d6cc3cf88489156ef59cdc49fd6562fae51ac4bc186f36a1ccc17756e14cda079b8efa7e4a81c087c76acc949322a861a13d7f116ed778f117e408b684e597a85fd781382189897a22378939ae4c", 0xb1}, {&(0x7f0000000f40)="89ab67296b1b072687a026ab8046d4096ee443b58cc09163c4616f2588227296de80a1eeb1ab0f31d371e0ecd44ccd8a619175749ada28db8b5f2d646eee1c5f02d03c0db97817543f7619e9b45950b92bcf813d9f079aac92688b46a1400c5125a24a63ea33a3e840833e89a09d994f9a006a2325aa9ffcf88f5e7f0c95ae0658657896203b2d8752f2cb8e9cb9c2c2e54a00a0195cb45df4485a67cbfac946714cc4a9576386fa95f269b9df7c3e99aff2b10d67dedbfbffb712db6a8401ccd74cfec4225abb4fcb872d0a86b26f8ed1b0135187e62835f9689fc8849ae439344af924a8c1da452bb6af", 0xeb}, {&(0x7f0000001040)="c09ad2361deeb44d68b0e17fcf3856c65cc52456fee82b14977fd0fc2d81d80ca905b8ee9cb58973af01fcd677ad753b150f18fe5b1e7b439476d0d77edbb5d1d3ba51441a32020acc52a1df1a164e398a27a4e4fccbb6182d6830fb7ce242b82a56026520321b8fb17da6aaeda0b52a05aa9727926f5148f8b1f94107e332ee814fb21055544163f367825f8b9b64b52ced1196a69fab0dd72ff3cc2666798be34ab806a44c1936789aaaf5ad6bdd76265bfa855f2fbc0287019952f94dac8e6fadd5d84f54450472ffb2c5891d86a8bf1544c2fb1991a17cd2603be0e9f31e89b4da26465806f25ff42557ff511883c36c", 0xf2}, {&(0x7f0000001140)="7c94ec4bd66409549598b492ff2cebf19aa0b73cc84c3306915ae5a722a73a0c9f9f3defa4be5e53902c5b9c29011ddb87fd9a0a335c19fa92e4d2f2c4ca75070beb2a3f71", 0x45}], 0x8}}], 0x3, 0x4008045)
sendmmsg(r1, &(0x7f0000001480)=[{{&(0x7f0000001300)=@can, 0x80, &(0x7f0000001380), 0x0, &(0x7f00000013c0)=[{0x50, 0x117, 0x4, "65f26aa9c9c268a4b302698e8c4d22b5391dcc566de68a34738fdbdd1f30e2abbd1269679005a4855fcf54fe07005195c7d8624c60e8313f8d7e"}, {0x68, 0x10f, 0x10, "95ebe51af5135ec4318ab710c3de62c52e30522b7cc3ff3756ae196a25999b8db8e09450203b3a88e8edb283f14f29bb20f85a15afe521c4319e7462bebaec7fa224e11a53bd6793337ab1e7f1e69c0adb45a8b6"}], 0xb8}}], 0x1, 0x20048000)
r3 = accept4$rose(0xffffffffffffffff, &(0x7f00000014c0)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000001500)=0x1c, 0x800)
ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4)
syz_emit_ethernet(0x56, &(0x7f0000001540)={@local, @broadcast, @void, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "3e13a403312a8fbac60abcbdb8a7c4319aedb00a611fec82d66b6d5ca29e1f17fffd23b1109479cba9fb994c72eaf95963c5587c9490441c61d85fd6a4ea8600"}}}}, &(0x7f00000015c0)={0x1, 0x3, [0x3a3, 0x9a6, 0x61b, 0x678]})
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001680)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)=@getchain={0x44, 0x66, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff2, 0x6}, {0x6, 0xe}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4)
syz_emit_ethernet(0xd4, &(0x7f00000017c0)={@multicast, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0xff, 0xf8, "1563", "db932fc2cca4210d245bb2d054c83038d1aaa90a423f6f9c05c8580148809fa2e3bbc6d85b6ec49ce10031c933d4e9993958dc31f5347eff8e0af3279133d402bf7801a8f2940d2e8408d4c5dcf232ee57dac77652a3b0ccfdb86b491ec03e68a258dc1cf7f2ec1a11c2020d700e6fd7e7a2ac75ce334328d25e6e74e51e758b90fafdc96518ffefb1721d7ac9634807d3fb1d650928c4dee786f723f3428461bcf2157f1b107ab5082bb399d58f9260f017d5cec23b23a957e76f8f9386"}}}}}, &(0x7f00000018c0)={0x1, 0x1, [0xae5, 0x7fa, 0x4e3, 0x1c3]})
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd, 0x11, r4, 0xc8e19000)
syz_emit_ethernet(0xf6, &(0x7f0000001900)={@empty, @multicast, @void, {@x25={0x805, {0x0, 0xff, 0x0, "1a30f28ac01b449937af2a1dc5ba324ef18da984a99b96a39f6e4e708aaa314a4fd58c76f1c7737555c06177841545b80db1529cb13fe1506e81ab56de64e6d0e513c26da3be42726ae91c4cf908e73e01e706e2bc5770a1315efab5e66cf9b5509442fb2b0adcb85926dd4b1a84edcc0afe1fa8075dae23b8d52711f63da8dd2237056594734a12aa35b8e49b4e77a0901880c18f60d36d45af387e18a19dbcde68bbf630c0f8e98f9a2b5fd869174d8ae18dd8f97c94efa90f228fd0fe3b25bcce521966770da9c045811ec9316009d9a98b25a3de6eb977474ff0c91f6ecb3e746518a6"}}}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000001c40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a40)={0x1a8, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_LABELS_MASK={0x2c, 0x17, [0x0, 0x100, 0xed, 0x1, 0x7, 0x1943, 0x401, 0x8, 0x3, 0x400]}, @CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_NAT_SRC={0x80, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0x80}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xeb}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x5, 0x6}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7f, 0x3}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x6}]}}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x820}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x108}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x48000}, 0xc040)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001c80)={<r7=>0x0}, &(0x7f0000001cc0)=0xc)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000001d00)=r7)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001d40)=<r8=>0x0)
r9 = syz_open_procfs$namespace(r8, &(0x7f0000001d80)='ns/pid\x00')
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000001dc0)={'filter\x00', 0x4}, 0x68)
r10 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000001e40), 0x800)
recvfrom(r10, &(0x7f0000001e80)=""/184, 0xb8, 0x10120, &(0x7f0000001f40)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @empty}, 0x0, 0x1, 0x1, 0x1}}, 0x80)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000001fc0)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x7, 0x6, 0x6, 0x6, 0x11, 0xfffffff4, 0x70}, 0x9c)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r12, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4)

166.261277ms ago: executing program 2 (id=606):
syz_emit_ethernet(0xeb, &(0x7f0000000000)={@remote, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@generic={0x1a, "eee999d84d78dec90448062819ed0d2f38bde26b4eed90c4d9c99cb197a55fa4a61477c08d34c083404cda43e9921d84445d9f899d801242d47de15b93f7d47a1dd398ca33e05c3ed5a246f5374d0d206ffa99fd58fc25b74fa0e9ab4459f8e0b783b858edeb83783677c79ce1e15f01990c3ccc855dba162d6b5156d2fbf44ea28bba5ed61baae991b1128237496f7a57c9daa0c1d3f81baeebaaea9a437a09a263513057858af0069e02b19ec8ed9aad3142402b3ebd7dd8ccc7ec5ffbb61904d6281b8fb36e9993a5b6a69342b29246a2d143d6387799ed"}}}, &(0x7f0000000100)={0x0, 0x2, [0x174, 0x2db, 0x366, 0x8]})

163.838823ms ago: executing program 1 (id=607):
r0 = socket$netlink(0x10, 0x3, 0x15)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x33, 0x3, 0x7005132, "8f5151239582"}})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x200, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7d76}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7206}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2ebd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd137}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @local, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @local, 0x9}}}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x5}, 0x8004)

159.921142ms ago: executing program 2 (id=608):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r0, 0x24}, 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000d0a010800000000000500000a000001090002009bd446b6ab3d7acb89347760562dce1673797a30000000000900010073797a31000000000800038004000080"], 0x34}}, 0x8000)

70.105575ms ago: executing program 2 (id=609):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d02000000000000000200000000000000000000000000000000000002"], &(0x7f0000000040)=""/202, 0x42, 0xca, 0x1}, 0x20)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x27, 0x0, &(0x7f00000002c0)="61dfb066c6677394ff0100000000000043aee3b6278051a7cb16648329887185caf6b60919471b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="150a00000000000061118c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0}, 0x94) (rerun: 32)

0s ago: executing program 2 (id=610):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
unshare(0x2a020400)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x749}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8)
sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x3ff, 0xc1, 0x7}, 0x20)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44564' (ED25519) to the list of known hosts.
syzkaller login: [   56.074870][ T5819] cgroup: Unknown subsys name 'net'
[   56.202666][ T5819] cgroup: Unknown subsys name 'cpuset'
[   56.208161][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.097260][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.230812][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.234037][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.237569][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.242084][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.245314][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.301997][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.305547][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.308536][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.311336][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.313913][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.319435][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.328268][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.337496][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.342776][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.345686][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.484712][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   63.619670][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.622681][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.625965][ T5833] bridge_slave_0: entered allmulticast mode
[   63.630364][ T5833] bridge_slave_0: entered promiscuous mode
[   63.657398][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.660652][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.663225][ T5833] bridge_slave_1: entered allmulticast mode
[   63.666114][ T5833] bridge_slave_1: entered promiscuous mode
[   63.697075][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.708324][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.745733][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   63.780287][ T5833] team0: Port device team_slave_0 added
[   63.798680][ T5833] team0: Port device team_slave_1 added
[   63.860996][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.863835][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.874984][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.887103][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   63.893890][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.896685][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.908237][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.958984][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.961370][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.963611][ T5837] bridge_slave_0: entered allmulticast mode
[   63.966428][ T5837] bridge_slave_0: entered promiscuous mode
[   63.971214][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.973914][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.976844][ T5837] bridge_slave_1: entered allmulticast mode
[   63.980725][ T5837] bridge_slave_1: entered promiscuous mode
[   64.058854][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.082264][ T5833] hsr_slave_0: entered promiscuous mode
[   64.085723][ T5833] hsr_slave_1: entered promiscuous mode
[   64.097115][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.133693][ T5837] team0: Port device team_slave_0 added
[   64.155413][ T5837] team0: Port device team_slave_1 added
[   64.157597][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.161039][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.164090][ T5838] bridge_slave_0: entered allmulticast mode
[   64.167419][ T5838] bridge_slave_0: entered promiscuous mode
[   64.207008][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.209677][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.212101][ T5838] bridge_slave_1: entered allmulticast mode
[   64.214975][ T5838] bridge_slave_1: entered promiscuous mode
[   64.231329][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.233708][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.243450][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.260680][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.270328][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.272967][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.281384][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.287180][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.334723][ T5838] team0: Port device team_slave_0 added
[   64.352228][ T5838] team0: Port device team_slave_1 added
[   64.397150][ T5837] hsr_slave_0: entered promiscuous mode
[   64.402215][ T5837] hsr_slave_1: entered promiscuous mode
[   64.405152][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.407878][ T5837] Cannot create hsr debugfs directory
[   64.427955][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.432416][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.441562][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.457581][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.460779][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.471606][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.576124][ T5838] hsr_slave_0: entered promiscuous mode
[   64.579408][ T5838] hsr_slave_1: entered promiscuous mode
[   64.582250][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.585335][ T5838] Cannot create hsr debugfs directory
[   64.710994][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.734793][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.752886][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.771617][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.841569][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.860227][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.873383][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.885151][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.965351][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.974893][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.988957][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.996513][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.138880][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.152801][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.183227][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   65.195768][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   65.207004][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.213887][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.216865][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.229740][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.232073][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.236740][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.239139][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.257490][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   65.265248][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.267491][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.299097][ T5841] Bluetooth: hci0: command tx timeout
[   65.303207][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.305596][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.322094][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.324644][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.378657][ T5841] Bluetooth: hci1: command tx timeout
[   65.380652][ T5841] Bluetooth: hci2: command tx timeout
[   65.484507][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.547574][ T5833] veth0_vlan: entered promiscuous mode
[   65.559417][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.565409][ T5833] veth1_vlan: entered promiscuous mode
[   65.584711][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.610451][ T5833] veth0_macvtap: entered promiscuous mode
[   65.630874][ T5833] veth1_macvtap: entered promiscuous mode
[   65.636620][ T5837] veth0_vlan: entered promiscuous mode
[   65.649544][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.654627][ T5837] veth1_vlan: entered promiscuous mode
[   65.667855][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.680674][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.683491][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.686080][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.689908][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.696506][ T5838] veth0_vlan: entered promiscuous mode
[   65.712997][ T5838] veth1_vlan: entered promiscuous mode
[   65.721746][ T5837] veth0_macvtap: entered promiscuous mode
[   65.733717][ T5837] veth1_macvtap: entered promiscuous mode
[   65.758318][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.774973][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.794432][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.797317][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.801033][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.803879][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.819586][  T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.822271][  T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.841375][ T5838] veth0_macvtap: entered promiscuous mode
[   65.860590][ T5838] veth1_macvtap: entered promiscuous mode
[   65.876594][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.885037][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.906830][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.923168][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.931895][  T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.936374][  T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.946617][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.952586][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.954659][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.955285][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.963344][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.010308][  T764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.012731][  T764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.063699][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.071644][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.111950][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.114422][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.413639][ T5921] netlink: 'syz.0.9': attribute type 1 has an invalid length.
[   66.421968][ T5921] netlink: 'syz.0.9': attribute type 1 has an invalid length.
[   66.426094][ T5921] netlink: 'syz.0.9': attribute type 2 has an invalid length.
[   66.471210][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   66.677722][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   66.861822][ T5950] syzkaller0: entered promiscuous mode
[   66.864085][ T5950] syzkaller0: entered allmulticast mode
[   66.872685][ T5952] lo speed is unknown, defaulting to 1000
[   66.875058][ T5952] lo speed is unknown, defaulting to 1000
[   66.880950][ T5953] Zero length message leads to an empty skb
[   66.881614][ T5952] lo speed is unknown, defaulting to 1000
[   66.894406][ T5952] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   66.907526][ T5952] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   66.934377][ T5952] lo speed is unknown, defaulting to 1000
[   66.949147][ T5952] lo speed is unknown, defaulting to 1000
[   66.953063][ T5952] lo speed is unknown, defaulting to 1000
[   67.267554][ T5967] lo speed is unknown, defaulting to 1000
[   67.378666][ T5834] Bluetooth: hci0: command tx timeout
[   67.458462][ T5834] Bluetooth: hci2: command tx timeout
[   67.460576][ T5834] Bluetooth: hci1: command tx timeout
[   67.584343][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'.
[   67.684200][ T5982] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[   67.737938][ T5984] bridge0: port 3(gretap0) entered blocking state
[   67.742074][ T5984] bridge0: port 3(gretap0) entered disabled state
[   67.744704][ T5984] gretap0: entered allmulticast mode
[   67.750166][ T5984] gretap0: entered promiscuous mode
[   67.752412][ T5984] bridge0: port 3(gretap0) entered blocking state
[   67.754728][ T5984] bridge0: port 3(gretap0) entered forwarding state
[   67.761134][ T5984] raw_sendmsg: syz.1.24 forgot to set AF_INET. Fix it!
[   67.938899][ T5992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.062214][ T5998] netlink: 'syz.1.31': attribute type 10 has an invalid length.
[   68.065817][ T5998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.31'.
[   68.070944][ T5998] veth0_vlan: entered allmulticast mode
[   68.074239][ T5998] bridge0: port 4(veth0_vlan) entered blocking state
[   68.077110][ T5998] bridge0: port 4(veth0_vlan) entered disabled state
[   68.089908][ T5998] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   68.121900][ T5998] lo speed is unknown, defaulting to 1000
[   68.311954][ T6006] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.33'.
[   68.385522][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'.
[   68.391579][   T33] audit: type=1800 audit(1752680632.719:2): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.35" name="memory.events" dev="tmpfs" ino=98 res=0 errno=0
[   68.643973][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'.
[   68.646705][ T6026] vxcan1: entered promiscuous mode
[   68.655009][ T6026] vxcan1: entered allmulticast mode
[   68.745700][ T6042] bridge0: port 4(syz_tun) entered blocking state
[   68.745992][ T6043] xt_connbytes: Forcing CT accounting to be enabled
[   68.750319][ T6042] bridge0: port 4(syz_tun) entered disabled state
[   68.753326][ T6042] syz_tun: entered allmulticast mode
[   68.755617][ T6043] Cannot find add_set index 0 as target
[   68.763900][ T6042] syz_tun: entered promiscuous mode
[   68.766779][ T6042] bridge0: port 4(syz_tun) entered blocking state
[   68.769732][ T6042] bridge0: port 4(syz_tun) entered forwarding state
[   68.797588][ T6046] netlink: 'syz.2.46': attribute type 5 has an invalid length.
[   68.800795][ T6046] netlink: 'syz.2.46': attribute type 5 has an invalid length.
[   68.901925][ T6054] sit1: entered promiscuous mode
[   69.018714][ T6064] xt_connbytes: Forcing CT accounting to be enabled
[   69.021479][ T6064] Cannot find add_set index 0 as target
[   69.095611][ T6069] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.54'.
[   69.459224][ T5834] Bluetooth: hci0: command tx timeout
[   69.539246][ T5841] Bluetooth: hci2: command tx timeout
[   69.541883][ T5834] Bluetooth: hci1: command tx timeout
[   69.637648][ T6083] netlink: 'syz.2.58': attribute type 1 has an invalid length.
[   69.641668][ T6083] netlink: 204 bytes leftover after parsing attributes in process `syz.2.58'.
[   69.645090][ T6083] netlink: 'syz.2.58': attribute type 1 has an invalid length.
[   69.699218][ T6087] dvmrp0: entered allmulticast mode
[   70.056842][ T6095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'.
[   70.506549][ T6112] netlink: 'syz.1.70': attribute type 21 has an invalid length.
[   70.526063][ T6114] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.610198][ T6120] netlink: 'syz.2.73': attribute type 1 has an invalid length.
[   70.767175][ T6137] sctp: [Deprecated]: syz.1.78 (pid 6137) Use of int in maxseg socket option.
[   70.767175][ T6137] Use struct sctp_assoc_value instead
[   70.800027][ T6132] unsupported nlmsg_type 40
[   71.065086][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.067037][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.303685][ T6182] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   71.538830][ T5834] Bluetooth: hci0: command tx timeout
[   71.544268][ T6204] bond0: entered promiscuous mode
[   71.545968][ T6204] bond_slave_0: entered promiscuous mode
[   71.549706][ T6204] bond_slave_1: entered promiscuous mode
[   71.553051][ T6204] bond0: left promiscuous mode
[   71.554621][ T6204] bond_slave_0: left promiscuous mode
[   71.556509][ T6204] bond_slave_1: left promiscuous mode
[   71.618491][ T5841] Bluetooth: hci2: command tx timeout
[   71.621166][ T5834] Bluetooth: hci1: command tx timeout
[   71.663478][ T6208] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   71.768780][ T6208] __nla_validate_parse: 7 callbacks suppressed
[   71.768795][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'.
[   72.073191][ T6227] sctp: failed to load transform for md5: -2
[   72.215282][ T6245] validate_nla: 3 callbacks suppressed
[   72.215312][ T6245] netlink: 'syz.1.100': attribute type 3 has an invalid length.
[   72.221724][ T6245] netlink: 'syz.1.100': attribute type 3 has an invalid length.
[   72.280542][ T6248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.101'.
[   72.381159][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'.
[   72.384948][ T6254] netlink: 'syz.0.103': attribute type 1 has an invalid length.
[   72.388926][ T6254] netlink: 'syz.0.103': attribute type 2 has an invalid length.
[   72.392690][ T6254] netlink: 80 bytes leftover after parsing attributes in process `syz.0.103'.
[   72.402220][ T6254] syz.0.103 uses obsolete (PF_INET,SOCK_PACKET)
[   72.547366][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'.
[   72.757702][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.761491][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.834501][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.843749][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.902927][ T6269] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.906197][ T6269] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.909596][ T6269] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.913213][ T6269] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.996364][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'.
[   73.002534][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'.
[   73.035516][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.111'.
[   73.048274][ T6282] netlink: 56 bytes leftover after parsing attributes in process `syz.2.110'.
[   73.124595][ T6286] netlink: 244 bytes leftover after parsing attributes in process `syz.0.112'.
[   73.240073][ T6300] xt_l2tp: v2 sid > 0xffff: 4294901760
[   73.290532][ T6306] warning: `syz.2.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.317765][ T6306] netlink: 'syz.2.120': attribute type 10 has an invalid length.
[   73.330020][ T6306] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   74.126047][ T6306] syz.2.120 (6306) used greatest stack depth: 20536 bytes left
[   74.202023][ T6328] xt_connbytes: Forcing CT accounting to be enabled
[   74.204704][ T6328] Cannot find add_set index 0 as target
[   74.288374][ T6331] xt_CT: You must specify a L4 protocol and not use inversions on it
[   74.434640][ T6344] sctp: [Deprecated]: syz.2.129 (pid 6344) Use of int in max_burst socket option.
[   74.434640][ T6344] Use struct sctp_assoc_value instead
[   74.551037][ T6351] Cannot find add_set index 0 as target
[   74.551331][ T6350] ieee802154 phy0 wpan0: encryption failed: -22
[   74.720239][ T6363] block nbd2: not configured, cannot reconfigure
[   74.780369][ T6365] netlink: 'syz.2.138': attribute type 1 has an invalid length.
[   74.943613][ T6376] Cannot find add_set index 0 as target
[   75.190187][ T6390] syzkaller1: entered promiscuous mode
[   75.192395][ T6390] syzkaller1: entered allmulticast mode
[   75.202540][ T6390] netlink: 'syz.1.146': attribute type 1 has an invalid length.
[   75.287316][ T6395] netlink: 'syz.2.148': attribute type 1 has an invalid length.
[   75.355910][ T6400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.359043][ T6400] IPv6: NLM_F_CREATE should be set when creating new route
[   75.361849][ T6400] IPv6: NLM_F_CREATE should be set when creating new route
[   75.373977][ T6402] Cannot find add_set index 0 as target
[   76.636701][ T6464] pim6reg1: entered promiscuous mode
[   76.639848][ T6464] pim6reg1: entered allmulticast mode
[   76.781034][ T6467] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.785459][ T6467] team0: Port device bond1 added
[   76.898851][ T6470] __nla_validate_parse: 17 callbacks suppressed
[   76.898867][ T6470] netlink: 248 bytes leftover after parsing attributes in process `syz.2.173'.
[   77.134408][ T6480] sctp: [Deprecated]: syz.2.174 (pid 6480) Use of int in max_burst socket option.
[   77.134408][ T6480] Use struct sctp_assoc_value instead
[   77.316974][ T6493] netlink: 'syz.2.176': attribute type 3 has an invalid length.
[   77.349230][ T6493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.436489][ T6493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.507226][ T6505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.178'.
[   77.595872][ T6511] syz.1.180 (6511) used greatest stack depth: 19760 bytes left
[   77.694247][ T6493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.799070][ T6493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.831198][ T6526] syzkaller0: entered promiscuous mode
[   77.832892][ T6526] syzkaller0: entered allmulticast mode
[   77.869963][ T6530] netlink: 56 bytes leftover after parsing attributes in process `syz.0.185'.
[   77.938456][ T6527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.004399][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   78.752009][ T6532] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   78.760316][ T6493] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.772132][ T6493] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.780674][ T6493] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.790533][ T6493] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.861408][ T6539] Bluetooth: MGMT ver 1.23
[   79.060124][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'.
[   79.063001][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'.
[   79.066091][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'.
[   79.449982][ T6606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.205'.
[   79.505778][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'.
[   79.561110][ T6621] netlink: 'syz.2.207': attribute type 1 has an invalid length.
[   79.607207][ T6622] lo speed is unknown, defaulting to 1000
[   80.131170][ T6660] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   80.133770][ T6660] netlink: 'syz.0.214': attribute type 2 has an invalid length.
[   80.137617][ T6659] netlink: 236 bytes leftover after parsing attributes in process `syz.0.214'.
[   80.231201][ T6671] x_tables: unsorted underflow at hook 4
[   80.399933][ T6677] netlink: 'syz.0.219': attribute type 11 has an invalid length.
[   80.526269][ T6679] lo speed is unknown, defaulting to 1000
[   80.939581][ T6691] tipc: Started in network mode
[   80.941545][ T6691] tipc: Node identity fe16df7588e7, cluster identity 4711
[   80.944549][ T6691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.947876][ T6691] syzkaller0: entered promiscuous mode
[   80.964964][ T6691] syzkaller0: entered allmulticast mode
[   80.980633][ T6690] tipc: Resetting bearer <eth:syzkaller0>
[   80.993492][ T6690] tipc: Disabling bearer <eth:syzkaller0>
[   81.299518][   T24] cfg80211: failed to load regulatory.db
[   81.490374][ T6715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.517689][ T6715] can: request_module (can-proto-5) failed.
[   82.553561][ T6749] Illegal XDP return value 6749 on prog  (id 118) dev N/A, expect packet loss!
[   83.473481][ T6755] netlink: 'syz.1.241': attribute type 1 has an invalid length.
[   83.476279][ T6755] __nla_validate_parse: 5 callbacks suppressed
[   83.476286][ T6755] netlink: 784 bytes leftover after parsing attributes in process `syz.1.241'.
[   83.714850][ T6761] netlink: 'syz.2.242': attribute type 2 has an invalid length.
[   83.723743][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'.
[   83.802155][ T6763] can: request_module (can-proto-5) failed.
[   84.363799][ T6792] netlink: 'syz.1.251': attribute type 1 has an invalid length.
[   84.602212][ T6814] tipc: Started in network mode
[   84.603773][ T6814] tipc: Node identity c2a7398c6ab4, cluster identity 4711
[   84.606207][ T6814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.611457][ T6814] syzkaller0: entered promiscuous mode
[   84.613149][ T6814] syzkaller0: entered allmulticast mode
[   84.624023][ T6814] tipc: Resetting bearer <eth:syzkaller0>
[   84.627952][ T6813] tipc: Resetting bearer <eth:syzkaller0>
[   84.636722][ T6813] tipc: Disabling bearer <eth:syzkaller0>
[   84.703833][ T6816] pimreg: entered allmulticast mode
[   84.721956][ T6816] dvmrp0: left allmulticast mode
[   84.723728][ T6816] pimreg: left allmulticast mode
[   84.753439][ T6820] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[   84.771782][ T6815] openvswitch: netlink: IP tunnel dst address not specified
[   84.803435][ T6822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.806187][ T6822] syzkaller0: entered promiscuous mode
[   84.808159][ T6822] syzkaller0: entered allmulticast mode
[   84.820811][ T6822] tipc: Resetting bearer <eth:syzkaller0>
[   84.824263][ T6821] tipc: Resetting bearer <eth:syzkaller0>
[   84.831438][ T6821] tipc: Disabling bearer <eth:syzkaller0>
[   84.910996][ T6824] netlink: 204 bytes leftover after parsing attributes in process `syz.1.264'.
[   85.070207][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x204
[   85.073252][ T6839] netlink: 'syz.1.266': attribute type 1 has an invalid length.
[   85.097571][ T6839] bond1: (slave bridge1): making interface the new active one
[   85.101140][ T6839] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   85.470790][ T6846] netlink: 'syz.0.270': attribute type 29 has an invalid length.
[   85.474306][ T6847] netlink: 'syz.0.270': attribute type 29 has an invalid length.
[   85.530854][ T6848] netlink: 500 bytes leftover after parsing attributes in process `syz.0.270'.
[   85.934632][ T6858] tipc: New replicast peer: 255.255.255.255
[   85.944661][ T6858] tipc: Enabled bearer <udp:syz2>, priority 10
[   85.952603][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'.
[   85.957466][ T6858] tipc: Disabling bearer <udp:syz2>
[   86.041097][   T52] IPVS: starting estimator thread 0...
[   86.045512][ T6871] Set syz1 is full, maxelem 0 reached
[   86.047449][ T6870] Set syz1 is full, maxelem 0 reached
[   86.077768][ T6877] netlink: 'syz.0.279': attribute type 1 has an invalid length.
[   86.088281][ T6877] netlink: 304 bytes leftover after parsing attributes in process `syz.0.279'.
[   86.094050][ T6877] netlink: 'syz.0.279': attribute type 2 has an invalid length.
[   86.096573][ T6877] netlink: 'syz.0.279': attribute type 5 has an invalid length.
[   86.101983][ T6879] netlink: 'syz.2.280': attribute type 6 has an invalid length.
[   86.128313][ T6873] IPVS: using max 62 ests per chain, 148800 per kthread
[   86.137111][ T6882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.139812][ T6882] syzkaller0: entered promiscuous mode
[   86.141452][ T6882] syzkaller0: entered allmulticast mode
[   86.209024][ T6891] ip6gretap0: entered allmulticast mode
[   86.213619][ T6882] tipc: Resetting bearer <eth:syzkaller0>
[   86.237520][ T6896] tipc: Resetting bearer <eth:syzkaller0>
[   86.261082][ T6896] tipc: Disabling bearer <eth:syzkaller0>
[   86.332579][ T6906] batadv_slave_1: entered promiscuous mode
[   86.341316][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'.
[   86.349960][ T6908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.385974][ T6908] lo speed is unknown, defaulting to 1000
[   86.420296][ T6914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.482289][ T6920] netlink: 144 bytes leftover after parsing attributes in process `syz.2.293'.
[   86.495969][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'.
[   86.540962][ T6923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 45011 - 0
[   86.544417][ T6923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 45011 - 0
[   86.548126][ T6923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 45011 - 0
[   86.551428][ T6923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 45011 - 0
[   86.554550][ T6923] geneve2: entered promiscuous mode
[   86.556238][ T6923] geneve2: entered allmulticast mode
[   86.638918][ T6926] bridge0: port 3(syz_tun) entered blocking state
[   86.643364][ T6926] bridge0: port 3(syz_tun) entered disabled state
[   86.646013][ T6926] syz_tun: entered allmulticast mode
[   86.655181][ T6926] syz_tun: entered promiscuous mode
[   86.792336][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'.
[   87.277558][ T6973] syzkaller1: entered promiscuous mode
[   87.280147][ T6973] syzkaller1: entered allmulticast mode
[   88.201072][ T6995] batadv1: entered promiscuous mode
[   88.309712][ T6999] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   88.699343][ T7039] Cannot find add_set index 0 as target
[   89.086490][ T7064] __nla_validate_parse: 8 callbacks suppressed
[   89.086504][ T7064] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.335'.
[   89.177320][ T7072] --map-set only usable from mangle table
[   89.471818][ T7088] netlink: 44 bytes leftover after parsing attributes in process `syz.0.340'.
[   89.476608][ T7088] validate_nla: 6 callbacks suppressed
[   89.476621][ T7088] netlink: 'syz.0.340': attribute type 9 has an invalid length.
[   89.532278][ T7092] netlink: 'syz.1.341': attribute type 29 has an invalid length.
[   89.537348][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.341'.
[   89.541763][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'.
[   89.802829][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'.
[   89.806377][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'.
[   89.917563][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   90.078960][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'.
[   90.084273][ T7124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.352'.
[   90.171050][ T7128] netlink: 'syz.2.353': attribute type 10 has an invalid length.
[   90.192919][ T7128] 8021q: adding VLAN 0 to HW filter on device team0
[   90.196721][ T7128] bond0: (slave team0): Enslaving as an active interface with an up link
[   90.335962][ T7130] lo speed is unknown, defaulting to 1000
[   90.403893][ T7134] netlink: 76 bytes leftover after parsing attributes in process `syz.2.354'.
[   91.246850][ T7154] --map-set only usable from mangle table
[   91.642077][ T7185] xt_CT: You must specify a L4 protocol and not use inversions on it
[   91.712023][ T7189] Cannot find add_set index 0 as target
[   92.227232][ T7208] --map-set only usable from mangle table
[   92.265463][ T7212] netlink: 'syz.0.380': attribute type 21 has an invalid length.
[   92.360565][ T7221] netlink: 'syz.1.383': attribute type 2 has an invalid length.
[   92.460588][ T7230] veth0: entered promiscuous mode
[   92.490448][ T7230] veth0 (unregistering): left promiscuous mode
[   92.525836][ T7234] netlink: zone id is out of range
[   92.539293][ T7234] netlink: zone id is out of range
[   92.541819][ T7234] netlink: zone id is out of range
[   92.543510][ T7234] netlink: zone id is out of range
[   92.545189][ T7234] netlink: zone id is out of range
[   92.546846][ T7234] netlink: zone id is out of range
[   92.550688][ T7234] netlink: zone id is out of range
[   92.552441][ T7234] netlink: zone id is out of range
[   92.554092][ T7234] netlink: zone id is out of range
[   92.556022][ T7234] netlink: zone id is out of range
[   92.720400][ T7246] IPv6: NLM_F_CREATE should be specified when creating new route
[   92.733229][ T7248] netlink: 'syz.0.393': attribute type 29 has an invalid length.
[   92.736337][ T7248] netlink: 'syz.0.393': attribute type 29 has an invalid length.
[   92.747089][ T7248] IPv6: sit1: Disabled Multicast RS
[   92.750305][ T7248] sit1: entered allmulticast mode
[   92.966094][ T7266] netlink: 'syz.2.401': attribute type 10 has an invalid length.
[   92.988158][   T10] IPVS: starting estimator thread 0...
[   93.022559][ T7265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.078167][ T7270] IPVS: using max 62 ests per chain, 148800 per kthread
[   93.781441][ T7339] ip6t_REJECT: ECHOREPLY is not supported
[   93.843751][ T7344] batman_adv: batadv0: Adding interface: ipvlan0
[   93.845789][ T7344] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.859918][ T7344] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[   94.139348][ T7359] syzkaller1: entered promiscuous mode
[   94.141124][ T7359] syzkaller1: entered allmulticast mode
[   94.287770][ T7374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.293953][ T7374] batadv_slave_1: entered promiscuous mode
[   94.299240][ T7374] __nla_validate_parse: 18 callbacks suppressed
[   94.299250][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[   94.340215][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'.
[   94.343597][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'.
[   94.381246][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'.
[   94.386688][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'.
[   94.572517][ T7407] : renamed from pim6reg1
[   94.579245][ T7410] batadv_slave_0: entered promiscuous mode
[   94.584899][ T7408] batadv_slave_0: left promiscuous mode
[   94.622581][ T7416] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   94.776929][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'.
[   94.782510][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'.
[   94.843860][ T7434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'.
[   94.995091][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[   95.170167][ T7451] netlink: 'syz.2.461': attribute type 1 has an invalid length.
[   95.272754][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'.
[   95.629625][ T7474] xt_NFQUEUE: number of total queues is 0
[   95.688580][ T7480] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   95.697839][ T7480] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   95.702587][ T7480] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20004
[   95.757802][ T7485] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   96.105077][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.108585][ T7515] batadv_slave_0: entered promiscuous mode
[   96.110500][ T7515] batadv_slave_0: entered allmulticast mode
[   96.834457][ T7526] xt_HMARK: proto mask must be zero with L3 mode
[   96.841679][ T7526] trusted_key: syz.0.485 sent an empty control message without MSG_MORE.
[   97.733988][ T7584] bridge0: port 3(gretap0) entered disabled state
[   97.770980][ T7584] bridge0: port 4(syz_tun) entered disabled state
[   97.774941][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.779281][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.872439][ T7584] batadv_slave_0: left promiscuous mode
[   97.874233][ T7584] batadv_slave_0: left allmulticast mode
[   97.879657][ T7584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.901317][ T7584] veth0_vlan: left allmulticast mode
[   97.926633][ T7584] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.930014][ T7584] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.932671][ T7584] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.935493][ T7584] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.965580][ T7584] sit1: left promiscuous mode
[   97.997865][ T7589] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.000776][ T7589] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.003345][ T7589] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.005927][ T7589] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.228110][ T7610] ieee802154 phy0 wpan0: encryption failed: -22
[   98.242828][ T7617] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[   98.762479][ T7666] netlink: 'syz.0.528': attribute type 6 has an invalid length.
[   99.104777][ T7672] netlink: 'syz.0.535': attribute type 7 has an invalid length.
[   99.344114][ T7679] netlink: 'syz.2.531': attribute type 11 has an invalid length.
[   99.347197][ T7679] __nla_validate_parse: 8 callbacks suppressed
[   99.347209][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'.
[   99.508362][ T7684] syzkaller0: entered promiscuous mode
[   99.510712][ T7684] syzkaller0: entered allmulticast mode
[   99.526743][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[  100.632077][ T7706] lo speed is unknown, defaulting to 1000
[  100.665200][ T7707] bridge0: port 4(syz_tun) entered blocking state
[  100.668129][ T7707] bridge0: port 4(syz_tun) entered forwarding state
[  100.670979][ T7707] bridge0: port 3(gretap0) entered blocking state
[  100.673518][ T7707] bridge0: port 3(gretap0) entered forwarding state
[  100.682392][ T7707] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.686376][ T7707] 8021q: adding VLAN 0 to HW filter on device team0
[  100.701305][ T7707] net_ratelimit: 125 callbacks suppressed
[  100.701349][ T7707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.722818][ T7706] lo speed is unknown, defaulting to 1000
[  100.726804][ T7706] lo speed is unknown, defaulting to 1000
[  100.881571][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'.
[  100.974229][ T7706] infiniband syz0: set active
[  100.980305][ T7706] infiniband syz0: added lo
[  100.983389][ T7706] syz0: rxe_create_cq: returned err = -12
[  100.985821][ T7706] infiniband syz0: Couldn't create ib_mad CQ
[  100.989135][ T7706] infiniband syz0: Couldn't open port 1
[  101.005111][ T7706] RDS/IB: syz0: added
[  101.006682][ T7706] smc: adding ib device syz0 with port count 1
[  101.010064][ T7706] smc:    ib device syz0 port 1 has pnetid 
[  101.031229][    T9] lo speed is unknown, defaulting to 1000
[  101.034885][  T971] lo speed is unknown, defaulting to 1000
[  101.038476][ T7706] lo speed is unknown, defaulting to 1000
[  101.283879][ T7706] lo speed is unknown, defaulting to 1000
[  101.520332][ T7706] lo speed is unknown, defaulting to 1000
[  101.952886][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'.
[  101.955768][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'.
[  102.163926][ T7761] dvmrp0: entered allmulticast mode
[  102.165474][ T7763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.333298][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'.
[  102.337365][ T7769] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  102.522720][ T7777] netlink: 112 bytes leftover after parsing attributes in process `syz.2.562'.
[  102.721701][ T7786] netlink: 'syz.0.566': attribute type 5 has an invalid length.
[  103.315021][ T7812] netlink: 'syz.1.573': attribute type 20 has an invalid length.
[  103.383477][ T7818] netlink: 'syz.1.574': attribute type 3 has an invalid length.
[  103.389308][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'.
[  103.609978][ T7836] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.619205][ T7836] syzkaller0: entered promiscuous mode
[  103.621027][ T7836] syzkaller0: entered allmulticast mode
[  103.684681][ T7836] tipc: Resetting bearer <eth:syzkaller0>
[  103.697751][ T7835] tipc: Resetting bearer <eth:syzkaller0>
[  103.715110][ T7835] tipc: Disabling bearer <eth:syzkaller0>
[  104.096551][ T7874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.593'.
[  104.298930][ T7886] netlink: 'syz.2.595': attribute type 10 has an invalid length.
[  104.302288][ T7886] bond0: (slave wlan1): Releasing backup interface
[  105.157438][ T7907] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.599'.
[  105.173498][   T52] lo speed is unknown, defaulting to 1000
[  105.218248][ T7909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.600'.
[  105.257552][ T7914] netlink: 44 bytes leftover after parsing attributes in process `syz.2.602'.
[  105.261774][ T7914] netlink: 10 bytes leftover after parsing attributes in process `syz.2.602'.
[  105.416696][ T7927] netdevsim netdevsim1: Direct firmware load for 2Q failed with error -2
[  105.418512][ T7929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'.
[  105.421125][ T7927] netdevsim netdevsim1: Falling back to sysfs fallback for: 2Q
[  105.591255][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.593687][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.621531][   T52] ------------[ cut here ]------------
[  105.623803][   T52] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  105.627620][   T52] WARNING: CPU: 1 PID: 52 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  105.631079][   T52] Modules linked in:
[  105.632940][   T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/1:1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  105.637815][   T52] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.641273][   T52] Workqueue: mld mld_ifc_work
[  105.642959][   T52] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  105.645143][   T52] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 c6 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  105.651949][   T52] RSP: 0018:ffffc900007ae498 EFLAGS: 00010246
[  105.654052][   T52] RAX: 026426d2d2190100 RBX: 000000000000000c RCX: ffff8881001eb980
[  105.656893][   T52] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  105.659834][   T52] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[  105.662423][   T52] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff88810ccbb6a8
[  105.664956][   T52] R13: 0000000000000000 R14: ffff888030c78e40 R15: ffff888030c7b0d8
[  105.667365][   T52] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  105.670028][   T52] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.672012][   T52] CR2: 0000000000000000 CR3: 0000000108bf0000 CR4: 00000000000006f0
[  105.674366][   T52] Call Trace:
[  105.675419][   T52]  <TASK>
[  105.676327][   T52]  rate_control_send_low+0x194/0x7a0
[  105.677904][   T52]  rate_control_get_rate+0x20b/0x5d0
[  105.679502][   T52]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  105.681175][   T52]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  105.682954][   T52]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  105.684816][   T52]  invoke_tx_handlers_late+0xb6/0x1820
[  105.686448][   T52]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[  105.688310][   T52]  ieee80211_tx_dequeue+0x3068/0x4340
[  105.689978][   T52]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  105.691665][   T52]  ? __local_bh_enable_ip+0x12d/0x1c0
[  105.693309][   T52]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  105.695057][   T52]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  105.696965][   T52]  ? __local_bh_enable_ip+0x12d/0x1c0
[  105.698648][   T52]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  105.700293][   T52]  ? do_raw_spin_unlock+0x4d/0x240
[  105.701817][   T52]  ieee80211_queue_skb+0x19e8/0x2180
[  105.703396][   T52]  ieee80211_tx+0x297/0x420
[  105.704873][   T52]  ? __pfx_ieee80211_tx+0x10/0x10
[  105.706445][   T52]  ? ieee80211_xmit+0x315/0x400
[  105.708180][   T52]  __ieee80211_subif_start_xmit+0xc49/0x1500
[  105.710279][   T52]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[  105.712472][   T52]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  105.714861][   T52]  ? skb_network_protocol+0x508/0x760
[  105.716706][   T52]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  105.718976][   T52]  ieee80211_subif_start_xmit+0xe0/0x510
[  105.720774][   T52]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  105.723048][   T52]  ? __lock_acquire+0xab9/0xd20
[  105.724842][   T52]  dev_hard_start_xmit+0x2d7/0x830
[  105.726741][   T52]  __dev_queue_xmit+0x1adf/0x3a70
[  105.728543][   T52]  ? register_lock_class+0x51/0x320
[  105.730513][   T52]  ? __dev_queue_xmit+0x27e/0x3a70
[  105.732291][   T52]  ? __pfx___dev_queue_xmit+0x10/0x10
[  105.734316][   T52]  ? read_seqbegin+0x122/0x250
[  105.735985][   T52]  ? neigh_resolve_output+0x438/0x750
[  105.737958][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.739777][   T52]  ? read_seqbegin+0x1ac/0x250
[  105.741199][   T52]  ? __pfx_read_seqbegin+0x10/0x10
[  105.742684][   T52]  ? __local_bh_enable_ip+0x12d/0x1c0
[  105.744283][   T52]  ? eth_header+0x11b/0x200
[  105.745619][   T52]  ? __asan_memcpy+0x40/0x70
[  105.747007][   T52]  ? eth_header+0x11b/0x200
[  105.748491][   T52]  ? __pfx_eth_header+0x10/0x10
[  105.749929][   T52]  ? neigh_resolve_output+0x624/0x750
[  105.751528][   T52]  ip6_finish_output2+0x11fe/0x16a0
[  105.753135][   T52]  ? ip6_finish_output2+0x701/0x16a0
[  105.754914][   T52]  ? __pfx_ip6_finish_output2+0x10/0x10
[  105.756854][   T52]  ? ip6_mtu+0x7d/0x3f0
[  105.758523][   T52]  ? ip6_mtu+0x7d/0x3f0
[  105.760026][   T52]  ip6_finish_output+0x234/0x7d0
[  105.761902][   T52]  NF_HOOK+0x9e/0x380
[  105.763364][   T52]  ? NF_HOOK+0x101/0x380
[  105.764699][   T52]  ? __pfx_NF_HOOK+0x10/0x10
[  105.766176][   T52]  ? __pfx_dst_output+0x10/0x10
[  105.767891][   T52]  ? icmp6_dst_alloc+0x3a5/0x420
[  105.769462][   T52]  ? icmp6_dst_alloc+0x3a5/0x420
[  105.770956][   T52]  mld_sendpack+0x800/0xd80
[  105.772488][   T52]  ? mld_sendpack+0x1de/0xd80
[  105.774206][   T52]  ? __pfx_mld_sendpack+0x10/0x10
[  105.775910][   T52]  mld_ifc_work+0x835/0xde0
[  105.777530][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.779598][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  105.781582][   T52]  process_scheduled_works+0xae1/0x17b0
[  105.783288][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  105.785385][   T52]  worker_thread+0x8a0/0xda0
[  105.786884][   T52]  kthread+0x711/0x8a0
[  105.788495][   T52]  ? __pfx_worker_thread+0x10/0x10
[  105.790435][   T52]  ? __pfx_kthread+0x10/0x10
[  105.792207][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.794141][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.796073][   T52]  ? __pfx_kthread+0x10/0x10
[  105.797784][   T52]  ret_from_fork+0x3fc/0x770
[  105.799316][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  105.801048][   T52]  ? __switch_to_asm+0x39/0x70
[  105.802603][   T52]  ? __switch_to_asm+0x33/0x70
[  105.804089][   T52]  ? __pfx_kthread+0x10/0x10
[  105.805556][   T52]  ret_from_fork_asm+0x1a/0x30
[  105.807026][   T52]  </TASK>
[  105.807972][   T52] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  105.810477][   T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/1:1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  105.814185][   T52] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.817205][   T52] Workqueue: mld mld_ifc_work
[  105.818715][   T52] Call Trace:
[  105.819880][   T52]  <TASK>
[  105.820950][   T52]  dump_stack_lvl+0x99/0x250
[  105.822328][   T52]  ? __asan_memcpy+0x40/0x70
[  105.823646][   T52]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.825186][   T52]  ? __pfx__printk+0x10/0x10
[  105.826586][   T52]  panic+0x2db/0x790
[  105.827783][   T52]  ? __pfx_panic+0x10/0x10
[  105.829447][   T52]  ? ret_from_fork_asm+0x1a/0x30
[  105.831070][   T52]  __warn+0x31b/0x4b0
[  105.832304][   T52]  ? __rate_control_send_low+0x5df/0x820
[  105.834033][   T52]  ? __rate_control_send_low+0x5df/0x820
[  105.835751][   T52]  report_bug+0x2be/0x4f0
[  105.837077][   T52]  ? __rate_control_send_low+0x5df/0x820
[  105.838899][   T52]  ? __rate_control_send_low+0x5df/0x820
[  105.840578][   T52]  ? __rate_control_send_low+0x5e1/0x820
[  105.842272][   T52]  handle_bug+0x84/0x160
[  105.843640][   T52]  exc_invalid_op+0x1a/0x50
[  105.845003][   T52]  asm_exc_invalid_op+0x1a/0x20
[  105.846503][   T52] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  105.848652][   T52] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 c6 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  105.855187][   T52] RSP: 0018:ffffc900007ae498 EFLAGS: 00010246
[  105.857208][   T52] RAX: 026426d2d2190100 RBX: 000000000000000c RCX: ffff8881001eb980
[  105.859643][   T52] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  105.862024][   T52] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[  105.864461][   T52] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff88810ccbb6a8
[  105.866865][   T52] R13: 0000000000000000 R14: ffff888030c78e40 R15: ffff888030c7b0d8
[  105.869479][   T52]  ? __rate_control_send_low+0x5de/0x820
[  105.871379][   T52]  rate_control_send_low+0x194/0x7a0
[  105.873317][   T52]  rate_control_get_rate+0x20b/0x5d0
[  105.875265][   T52]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  105.877317][   T52]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  105.879512][   T52]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  105.881802][   T52]  invoke_tx_handlers_late+0xb6/0x1820
[  105.883795][   T52]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[  105.885947][   T52]  ieee80211_tx_dequeue+0x3068/0x4340
[  105.887935][   T52]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  105.890013][   T52]  ? __local_bh_enable_ip+0x12d/0x1c0
[  105.891986][   T52]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  105.894215][   T52]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  105.896561][   T52]  ? __local_bh_enable_ip+0x12d/0x1c0
[  105.898538][   T52]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  105.900635][   T52]  ? do_raw_spin_unlock+0x4d/0x240
[  105.902547][   T52]  ieee80211_queue_skb+0x19e8/0x2180
[  105.904533][   T52]  ieee80211_tx+0x297/0x420
[  105.906227][   T52]  ? __pfx_ieee80211_tx+0x10/0x10
[  105.908132][   T52]  ? ieee80211_xmit+0x315/0x400
[  105.909871][   T52]  __ieee80211_subif_start_xmit+0xc49/0x1500
[  105.912030][   T52]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[  105.914354][   T52]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  105.916723][   T52]  ? skb_network_protocol+0x508/0x760
[  105.918758][   T52]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  105.920957][   T52]  ieee80211_subif_start_xmit+0xe0/0x510
[  105.922998][   T52]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  105.925197][   T52]  ? __lock_acquire+0xab9/0xd20
[  105.926828][   T52]  dev_hard_start_xmit+0x2d7/0x830
[  105.928392][   T52]  __dev_queue_xmit+0x1adf/0x3a70
[  105.929888][   T52]  ? register_lock_class+0x51/0x320
[  105.931528][   T52]  ? __dev_queue_xmit+0x27e/0x3a70
[  105.933259][   T52]  ? __pfx___dev_queue_xmit+0x10/0x10
[  105.935022][   T52]  ? read_seqbegin+0x122/0x250
[  105.936464][   T52]  ? neigh_resolve_output+0x438/0x750
[  105.938682][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.940252][   T52]  ? read_seqbegin+0x1ac/0x250
[  105.941884][   T52]  ? __pfx_read_seqbegin+0x10/0x10
[  105.943673][   T52]  ? __local_bh_enable_ip+0x12d/0x1c0
[  105.945266][   T52]  ? eth_header+0x11b/0x200
[  105.946632][   T52]  ? __asan_memcpy+0x40/0x70
[  105.947981][   T52]  ? eth_header+0x11b/0x200
[  105.949346][   T52]  ? __pfx_eth_header+0x10/0x10
[  105.950777][   T52]  ? neigh_resolve_output+0x624/0x750
[  105.952394][   T52]  ip6_finish_output2+0x11fe/0x16a0
[  105.954131][   T52]  ? ip6_finish_output2+0x701/0x16a0
[  105.956137][   T52]  ? __pfx_ip6_finish_output2+0x10/0x10
[  105.957845][   T52]  ? ip6_mtu+0x7d/0x3f0
[  105.959233][   T52]  ? ip6_mtu+0x7d/0x3f0
[  105.960830][   T52]  ip6_finish_output+0x234/0x7d0
[  105.962712][   T52]  NF_HOOK+0x9e/0x380
[  105.964274][   T52]  ? NF_HOOK+0x101/0x380
[  105.965880][   T52]  ? __pfx_NF_HOOK+0x10/0x10
[  105.967655][   T52]  ? __pfx_dst_output+0x10/0x10
[  105.969479][   T52]  ? icmp6_dst_alloc+0x3a5/0x420
[  105.971355][   T52]  ? icmp6_dst_alloc+0x3a5/0x420
[  105.973281][   T52]  mld_sendpack+0x800/0xd80
[  105.975036][   T52]  ? mld_sendpack+0x1de/0xd80
[  105.976816][   T52]  ? __pfx_mld_sendpack+0x10/0x10
[  105.978771][   T52]  mld_ifc_work+0x835/0xde0
[  105.980614][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.982591][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  105.984751][   T52]  process_scheduled_works+0xae1/0x17b0
[  105.986716][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  105.988513][   T52]  worker_thread+0x8a0/0xda0
[  105.990239][   T52]  kthread+0x711/0x8a0
[  105.991778][   T52]  ? __pfx_worker_thread+0x10/0x10
[  105.993523][   T52]  ? __pfx_kthread+0x10/0x10
[  105.995249][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.997007][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.998579][   T52]  ? __pfx_kthread+0x10/0x10
[  106.000066][   T52]  ret_from_fork+0x3fc/0x770
[  106.001470][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  106.002987][   T52]  ? __switch_to_asm+0x39/0x70
[  106.004440][   T52]  ? __switch_to_asm+0x33/0x70
[  106.005850][   T52]  ? __pfx_kthread+0x10/0x10
[  106.007222][   T52]  ret_from_fork_asm+0x1a/0x30
[  106.008654][   T52]  </TASK>
[  106.010531][   T52] Kernel Offset: disabled
[  106.012045][   T52] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:44:30  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff84c1cf9d RBX=00007f349e6e5720 RCX=000000000006cfca RDX=ffffffff84c1cfc5
RSI=ffffffff84c1cfc5 RDI=0000000000000017 RBP=ffffffff84c1cfc5 RSP=00007ffdc6bb1800
R8 =00007f349dbb6038 R9 =00007f349dba2000 R10=00007f349cfff008 R11=0000000000000017
R12=0000000000000017 R13=0000000000000000 R14=ffffffff84c1cfc5 R15=000000000006cfca
RIP=00007f349d86ea35 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558b551500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000002a1bd000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f349db85478 00007f349db85450 XMM03=00007f349db85488 00007f349db85480
XMM04=00007f349e6ed100 00007f349db85440 XMM05=00007f349db85458 00007f349db854a0
XMM06=00007f349db85498 00007f349db85490 XMM07=00007f349db85488 00007f349db85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f349da11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bfc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfe970 RSP=ffffc900007adbd0
R8 =ffff8881069c8237 R9 =1ffff11020d39046 R10=dffffc0000000000 R11=ffffffff854786b0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85478727 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000108bf0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbeb4585478 00007fbeb4585450 XMM03=00007fbeb4585488 00007fbeb4585480
XMM04=00007fbeb50ed100 00007fbeb4585440 XMM05=00007fbeb4585458 00007fbeb45854a0
XMM06=00007fbeb4585498 00007fbeb4585490 XMM07=00007fbeb4585488 00007fbeb4585480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbeb4411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
